home

amc.exe

TLC_Plans

Advanced PC Care

Publisher:
Advanced PC Care  (signed and verified)

Product:
TLC_Plans

Version:
1.0.0.0

MD5:
363006009aa7b13252167d9189830d33

SHA-1:
11e671e9307ae1ecdde29552ed475d07bbf64482

SHA-256:
064559e1ebeac3c9aeea0c106cba6bc841d82343eadeb2c5f6f310f039d8e138

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 10:49:10 AM UTC  (today)

File size:
96.1 KB (98,360 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2015

Original file name:
tlc_plans.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\amc.exe

Digital Signature
Signed by:
Advanced PC Care

Authority:
COMODO CA Limited

Valid from:
7/8/2015 7:00:00 PM

Valid to:
12/29/2015 5:59:59 PM

Subject:
CN=Advanced PC Care, O=Advanced PC Care, STREET=58/5 Model Town - A, STREET=Malviya Nagar, L=Jaipur, S=Rajasthan, PostalCode=302004, C=IN

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00C7883CB2676A4B6FBEBFBBEA84D9063D

File PE Metadata
Compilation timestamp:
10/14/2015 10:56:07 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:rWZWDxlJiIKq+Q+ZRDNzQzCkwu6dIKq+Q+JzYcHe+ZdMESKur:4WDuq+Q+HDeIfq+Q+Y+FSr

Entry address:
0xE98E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.6255

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
50.5 KB (51,712 bytes)

The file amc.exe has been seen being distributed by the following 2 URLs.

http://techliveconnect.com/amc.exe

http://www.techliveconnect.com/amc.exe

Scan amc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.